$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: vPuR3DGU5RcR/9yV8Ew787HHU9lcYHYWMhs3FcyO7F0= Subject key identifier: D0:36:6C:50:0B:7B:D7:45:6C:09:32:07:F2:EC:84:D7:76:A3:FF:B8 Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 044C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 0448 Signing time: Sat 31 May 2025 00:26:48 +0000 Manifest this update: Sat 31 May 2025 00:26:48 +0000 Manifest next update: Sat 07 Jun 2025 00:26:48 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: q9O6OsHpq25yGO2bnhTleGIe70Gc9haBUWypLrP1NZw=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: May 31 00:26:48 2025 GMT Not After : Jun 7 00:26:48 2025 GMT Subject: CN=683a4cc8-b31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:2e:9d:3d:f2:3b:4d:63:5c:77:f0:47:b4: 71:a3:8d:7b:f7:42:48:8d:f6:dc:0e:19:ab:12:4a: 58:27:90:21:84:7c:67:41:55:b2:c0:18:1b:e9:d7: 26:bc:99:b1:1a:d3:65:55:23:b8:5d:36:1f:13:21: dc:43:29:5e:e5:b4:61:00:4b:57:4b:9a:16:eb:87: c4:e9:9e:99:f9:c6:75:67:e3:e1:27:66:9e:ff:cd: c6:1d:fa:ea:80:55:ec:89:c1:5d:eb:40:15:d8:dc: 09:c0:93:99:a1:af:cb:af:45:f7:3e:fb:c0:be:27: 84:d3:c9:e1:f2:6e:ef:59:32:78:7c:02:60:83:b0: e6:c9:4e:35:82:82:62:37:db:b6:46:c4:a6:49:1d: 43:ff:b4:39:21:bd:46:40:02:34:6e:03:08:76:d3: 24:a6:a2:39:71:7a:b0:75:ce:bf:66:20:de:cf:87: cd:0f:77:0d:a7:e2:b8:ec:14:76:90:b8:3a:97:45: 32:f7:3a:36:a8:71:1b:55:b9:30:dd:a1:36:5a:db: 8b:fe:c4:c3:a3:c0:65:7f:b4:39:e6:70:3d:dd:52: 38:17:32:2f:78:9e:64:24:20:c8:95:0d:01:cd:19: 26:fe:da:82:19:f3:f3:bd:98:51:6f:95:8f:5e:23: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:36:6C:50:0B:7B:D7:45:6C:09:32:07:F2:EC:84:D7:76:A3:FF:B8 X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:62:b7:77:b2:6f:de:6c:21:81:40:3d:49:a2:8f:e0:9a:93: da:f1:e3:e1:5e:99:3b:76:b9:69:51:11:90:ff:75:7b:e0:59: b5:54:b6:25:49:81:de:3d:cd:3c:1f:5b:d0:1e:56:ac:34:54: c8:30:32:ef:3d:97:5a:a0:3c:47:82:8c:b5:33:9f:69:0d:8a: 83:43:7b:66:28:da:53:5b:b0:cd:ea:63:44:01:f3:0f:08:c7: 4d:82:33:65:11:47:55:95:df:88:b9:d1:4b:f7:13:06:7b:66: 89:f4:41:60:b2:e8:5f:20:05:1f:19:05:1a:7d:b3:d1:33:7c: f7:e5:54:6d:f7:a0:10:a1:62:ce:8c:73:ea:0b:b8:f1:a6:61: d4:09:c4:e2:ea:f5:a9:8b:3f:f3:4f:24:de:46:b1:d2:a4:e5: b0:ac:97:e6:ae:e6:ab:91:4b:59:5a:bb:87:2b:d9:9b:69:24: fd:9b:fd:b6:0b:88:09:c4:4f:7a:7a:af:76:71:7e:e2:64:a3: ad:db:be:2c:16:ff:e2:33:1f:52:b4:49:4f:27:00:12:6d:30: 95:f6:27:fe:76:88:1c:09:85:f0:86:ba:1b:48:e5:6f:e0:f1: 95:b0:71:78:22:1a:5e:79:84:b8:ca:29:5d:09:05:7a:0d:d6: b3:cd:bd:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjUwNTMxMDAyNjQ4WhcNMjUwNjA3MDAyNjQ4WjAYMRYwFAYD VQQDEw02ODNhNGNjOC1iMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT8unT3yO01jXHfwR7Rxo41790JIjfbcDhmrEkpYJ5AhhHxnQVWywBgb6dcm vJmxGtNlVSO4XTYfEyHcQyle5bRhAEtXS5oW64fE6Z6Z+cZ1Z+PhJ2ae/83GHfrq gFXsicFd60AV2NwJwJOZoa/Lr0X3PvvAvieE08nh8m7vWTJ4fAJgg7DmyU41goJi N9u2RsSmSR1D/7Q5Ib1GQAI0bgMIdtMkpqI5cXqwdc6/ZiDez4fND3cNp+K47BR2 kLg6l0Uy9zo2qHEbVbkw3aE2WtuL/sTDo8Blf7Q55nA93VI4FzIveJ5kJCDIlQ0B zRkm/tqCGfPzvZhRb5WPXiMH8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNA2bFAL e9dFbAkyB/LshNd2o/+4MB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhYrd3sm/ebCGBQD1Joo/gmpPa8ePhXpk7drlpURGQ/3V74Fm1VLYl SYHePc08H1vQHlasNFTIMDLvPZdaoDxHgoy1M59pDYqDQ3tmKNpTW7DN6mNEAfMP CMdNgjNlEUdVld+IudFL9xMGe2aJ9EFgsuhfIAUfGQUafbPRM3z35VRt96AQoWLO jHPqC7jxpmHUCcTi6vWpiz/zTyTeRrHSpOWwrJfmruarkUtZWruHK9mbaST9m/22 C4gJxE96eq92cX7iZKOt274sFv/iMx9StElPJwASbTCV9if+dogcCYXwhrobSOVv 4PGVsHF4IhpeeYS4yildCQV6Ddazzb2H -----END CERTIFICATE-----Generated at Sat May 31 16:59:26 2025 by rpki-client